Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
File:                     kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json)
Hash identifier:          ttuED92Y2ZJfEHXVi/WDgLQIygaaiCwoe7ezTgBnwK0=
Subject key identifier:   57:7A:F9:F6:A1:46:1B:83:7E:E5:F3:B2:46:0A:E8:DD:D2:B8:98:E8
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Certificate issuer:       /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial:       2A36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
Manifest number:          2920
Signing time:             Tue 28 Jul 2026 15:43:23 +0000
Manifest this update:     Tue 28 Jul 2026 15:43:22 +0000
Manifest next update:     Tue 04 Aug 2026 15:43:22 +0000
Files and hashes:         1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: lTfNXgF4wND4fFt4gM05sXaGUULcLSpuqs5MIAShpZ4=)
                          2: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: /ZeOnoGYWqCgohHT1TYAQRbpDcN3ZY5azA82GYZLfCI=)
                          3: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=)
                          4: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=)
                          5: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: DC/CiNTewEy9AjzNKO1rCpeeQC3b7v2RZLNf6CbyhHI=)
                          6: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=)
                          7: AB2AF04486EE11F19E006003A7EE528E.roa (hash: tYkGolBBO+H78+E2rvVmU5EKCzbGFp0Un19MVtD7J/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10806 (0x2a36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
        Validity
            Not Before: Jul 28 15:43:22 2026 GMT
            Not After : Aug  4 15:43:22 2026 GMT
        Subject: CN=6a68ce1b-d72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:49:6a:ce:6a:a5:7f:a7:9f:50:3c:a6:e6:
                    24:a8:e9:e5:af:71:5b:11:9c:62:a9:c9:fc:e1:00:
                    a1:4b:8d:20:68:70:e4:23:95:fb:9c:07:cd:fb:51:
                    a9:aa:e7:60:22:38:aa:23:80:78:20:b1:2f:8b:69:
                    fa:89:9c:31:1d:29:ef:5a:59:1d:13:78:37:43:7f:
                    b9:f3:cc:95:09:1b:27:7a:71:31:ab:34:bc:de:ab:
                    0a:dd:96:dd:81:b9:f2:fc:25:92:51:47:52:1c:27:
                    59:5f:89:35:bf:e9:ee:26:87:63:c3:20:c8:0a:47:
                    9b:ef:4b:e7:c7:be:9f:70:1f:4b:13:0e:53:74:0a:
                    b9:a5:92:ce:40:e9:d2:47:fa:74:18:1a:56:b3:2c:
                    25:a3:36:52:b7:cc:68:90:d6:d5:08:ae:7c:be:7b:
                    3f:87:b5:73:a7:21:3c:12:00:64:df:97:d6:58:d9:
                    3c:1e:d5:e2:c8:4c:e2:18:87:46:f2:3a:4c:7e:0c:
                    2e:f1:e1:d0:ac:c5:be:12:b6:59:33:bf:b1:b8:9a:
                    c3:14:15:74:a3:dc:74:73:4a:06:fa:80:e3:4d:c9:
                    cf:4c:14:74:be:33:1f:77:bf:81:92:e6:38:dd:87:
                    1d:d0:e2:51:0e:ac:b4:b1:47:10:8e:54:d7:a0:e5:
                    42:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:F9:F6:A1:46:1B:83:7E:E5:F3:B2:46:0A:E8:DD:D2:B8:98:E8
            X509v3 Authority Key Identifier:
                keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:29:77:8a:a5:e8:a5:07:12:ae:83:b3:c0:01:e3:91:fe:cb:
         34:e2:e8:1a:99:5a:0d:03:b0:29:47:ab:b4:b8:6c:15:5f:38:
         59:3c:6c:5c:3a:2b:79:f2:c3:02:6c:57:72:86:c2:80:0c:71:
         00:85:c9:1d:03:42:ed:db:79:f8:f6:6c:d3:9a:bd:2b:2d:90:
         e8:fe:c5:14:60:79:c7:de:92:d7:b4:7a:da:7d:47:08:23:26:
         28:11:92:34:34:c4:22:9c:1b:5a:0c:82:0f:d3:b4:02:62:8b:
         93:b0:10:47:9b:e4:15:3c:7c:f5:76:d8:a1:71:4f:92:29:a2:
         45:ce:4f:41:9d:58:a5:9d:e3:ef:21:ab:e8:96:5f:83:05:38:
         e4:1f:94:0e:8b:da:b7:f4:27:c8:ac:1c:05:bc:cc:44:6a:73:
         73:81:cd:c0:ed:55:b0:c2:d4:00:60:36:60:43:cd:a6:0b:40:
         c3:51:f1:f8:39:a5:bd:1b:db:6c:c1:be:f0:70:a2:a9:b1:08:
         22:90:23:0a:80:ab:7a:7d:da:d6:46:e3:99:c2:95:09:17:c4:
         e7:de:00:48:09:12:26:c7:a3:86:d6:e3:05:70:aa:4d:c9:86:
         19:7c:b5:ce:28:8c:bc:e2:f0:b6:bb:a8:e2:26:22:18:d7:78:
         3e:23:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:08 2026 by rpki-client